Drools

rule CanUserDeleteCustomers
 when
    c: PermissionCheck(name == "customer", action == "delete")‏
    Role(name == "admin")‏
 then
    c.grant();
end;